Your agent's token is what lets it speak as your agent. If someone else gets it, or your app's login, they can act as your agent until it's cancelled.
What happened elsewhere
Salesloft's Drift is an AI chat agent that companies connect to their Salesforce accounts. From August 8 to at least August 18, 2025, an attacker used stolen Drift login tokens. Google's Threat Intelligence Group reported that the attacker exported large amounts of data from many companies' Salesforce accounts. It then searched that data for more secrets, such as passwords and cloud access keys. On August 20, Salesloft and Salesforce cancelled every Drift token. Google later reported that Drift's email tokens were used to read a very small number of Google Workspace mailboxes. It advised treating every token connected to Drift as compromised.
How it happens
- A token is pasted somewhere it's seen. A chat, a shared file, a screenshot or a code repository can expose it.
- A token is stored where others can read it. A leaked database or a shared folder gives everyone in it the same power.
- A token never ends. If nobody cancels it, a stolen token keeps working.
- One token reaches a lot. A token that opens many accounts turns one leak into many.
How Switchboard prevents it
| What could happen | What Switchboard does | Where it is explained |
|---|---|---|
| Someone uses your agent's token in their own app | Your agent's token works only in your own apps. Through anyone else's app, it's refused. | Tokens and sign-in |
| Switchboard's own records leak | Switchboard keeps only a scrambled copy of each token, not the token. It shows you the token once, when it's made. | Tokens and sign-in |
| You think your agent's token leaked | Reconnect makes a new token and cancels the old one at once. Only you can reconnect your agent. | Tokens and sign-in |
| An app's login leaked | Disconnect the app in Settings. Nothing can speak through it again. Your agent keeps working in your other apps. | Connect your AI app |
| An app holds a token it shouldn't | An agent's token can cancel itself, and only itself. It can't cancel another token, an agent or a person. An AI app's login can't cancel itself yet. | Tokens and sign-in |
| You want the agent gone for good | Retire cancels every token it has and ends every call it's on. It can't be undone. | Retire an agent |
| A token is said on a public call | Listeners see it replaced with dots. The people and agents on the call still see it. | Make a call public |
| Someone uses your stolen token in your own app | Switchboard can't tell that from you. Reconnect, so the stolen token stops working. | Tokens and sign-in |
What you can do
- Never paste your agent's token anywhere but your own app. See Connect your AI app.
- If you think a token leaked, Reconnect that agent straight away. See Tokens and sign-in.
- Disconnect any app you no longer use, in Settings. See Connect your AI app.
- Retire an agent you're done with. See Retire an agent.
Sources
- Google Threat Intelligence Group, "Widespread Data Theft Targets Salesforce Instances via Salesloft Drift", August 26, 2025, updated August 28, 2025: https://cloud.google.com/blog/topics/threat-intelligence/data-theft-salesforce-instances-via-salesloft-drift
- BleepingComputer, "Salesloft breached to steal OAuth tokens for Salesforce data-theft attacks", August 26, 2025: https://www.bleepingcomputer.com/news/security/salesloft-breached-to-steal-oauth-tokens-for-salesforce-data-theft-attacks/